Advisories › Swann Communications › ICSA-26-286-02
Swann Communications SWIFI-SE2KIC: 3 CVEs, Medium 6.2
Summary
CISA reports 3 vulnerabilities in Swann Communications SWIFI-SE2KIC firmware. Weakness type: Missing Authentication for Critical Function. Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. Highest CVSS v3 score: 6.2 (Medium), not remotely exploitable per its CVSS vector.
What to do: Plan: Keep device firmware updated when new releases become available.
At a glance
- Vendor
- Swann Communications
- Products
- SWIFI-SE2KIC firmware
- CVEs
- CVE-2026-107605, CVE-2026-107606, CVE-2026-107607
- Highest CVSS v3
- 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Commercial Facilities
- Deployed
- Worldwide
- Vendor HQ
- Australia
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-107605 | Missing Authentication for Critical Function | 6.2 | – | No | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication. |
| CVE-2026-107606 | Missing Authentication for Critical Function | 6.2 | – | No | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication. |
| CVE-2026-107607 | Missing Authentication for Critical Function | 6.2 | – | No | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication. |
Affected products (1)
- Swann Communications SWIFI-SE2KIC firmware: <=2.0.22
Vendor fixes and mitigations (from advisory)
- Mitigation: Swann Communications has provided the following interim security measures. For more information, contact Swann Communications https://support.swann.com/hc/en-us/requests/new. link
- Mitigation: Keep the camera behind a secured router and firewall.
- Mitigation: Avoid exposing RTSP services to the internet through port forwarding, DMZ configurations, or direct public IP access.
- Mitigation: Ensure the router and associated accounts use strong, unique passwords.
- Mitigation: Keep device firmware updated when new releases become available.
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.